Corretto version: 21.0.9.10.1$$$Release Date: October 21; 2025$$$$$$Target Platforms $$$RPM-based Linux using glibc 2.12 or later; x86_64$$$Debian-based Linux using glibc 2.12 or later; x86_64$$$RPM-based Linux using glibc 2.17 or later; aarch64$$$Debian-based Linux using glibc 2.17 or later; aarch64$$$Alpine-based Linux; x86_64$$$Alpine-based Linux; aarch64$$$Windows 10 or later; x86_64$$$macOS 14.0 and later; x86_64$$$macOS 14.0 and later; aarch64$$$$$$1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms$$$The following issues are addressed in 21.0.9.10.1:$$$Issue Namet Platformt Descriptiont Link$$$Import jdk-21.0.9+10t Allt Updates Corretto baseline to OpenJDK 21.0.9+10thttps://github.com/openjdk/jdk21u/releases/tag/jdk-21.0.9+10$$$Bundling async profilert Alpine; macOS; RPM-based Linux; Debian-based LinuxtBinaries for the async-profiler are included in official builds for supported platformsthttps://github.com/corretto/corretto-25/pull/19$$$JDK-8277444t Allt Addressing data race between JvmtiClassFileReconstituter::copy_bytecodes and class linkingthttps://bugs.openjdk.org/browse/JDK-8277444$$$JDK-8359435taarch64t AArch64: add support for SB instruction to MacroAssembler::spin_waitt https://bugs.openjdk.org/browse/JDK-8359435$$$Set OnSpinWaitInst to SB for Graviton 4taarch64t Default value for the OnSpinWaitInst flag to sb if the CPU model matches 0xd4f (Neoverse-V2); otherwise; it remains isbthttps://github.com/corretto/corretto-21/pull/126$$$The following CVEs are addressed in 21.0.9.10.1:$$$$$$CVEtCVSStComponent$$$CVE-2025-53057t5.9tsecurity-libs/java.security$$$CVE-2025-53066t4.8txml/jaxp$$$CVE-2025-61748t3.7tcore-libs

Corretto version: 21.0.8.9.1$$$Release Date: July 15; 2025$$$$$$The following issues are addressed in 21.0.8.9.1:$$$$$$Issue NametPlatformtDescriptiontLink$$$Import jdk-21.0.8+9tAlltUpdates Corretto baseline to OpenJDK 21.0.8+9thttps://github.com/openjdk/jdk21u/releases/tag/jdk-21.0.8+9$$$JDK-8353013tAlltjava.net.URI.create(String) may have low performance to scan the host/domain name from URI string when the hostname starts with numbertPR-101$$$JDK-8349705tAlltjava.net.URI.scanIPv4Address throws unnecessary URISyntaxExceptiontPR-102$$$$$$The following CVEs are addressed in 21.0.8.9.1:$$$$$$CVEtCVSStComponent$$$CVE-2025-50059t8.6tcore-libs/java.net$$$CVE-2025-30749t8.1tclient-libs/2d$$$CVE-2025-50106t8.1tclient-libs/2d$$$CVE-2025-30754t4.8tsecurity-libs/javax.net.ssl

Corretto version: 21.0.8.9.1$$$Release Date: July 15; 2025$$$$$$The following issues are addressed in 21.0.8.9.1:$$$$$$Issue NametPlatformtDescriptiontLink$$$Import jdk-21.0.8+9tAlltUpdates Corretto baseline to OpenJDK 21.0.8+9thttps://github.com/openjdk/jdk21u/releases/tag/jdk-21.0.8+9$$$JDK-8353013tAlltjava.net.URI.create(String) may have low performance to scan the host/domain name from URI string when the hostname starts with numbertPR-101$$$JDK-8349705tAlltjava.net.URI.scanIPv4Address throws unnecessary URISyntaxExceptiontPR-102$$$$$$The following CVEs are addressed in 21.0.8.9.1:$$$$$$CVEtCVSStComponent$$$CVE-2025-50059t8.6tcore-libs/java.net$$$CVE-2025-30749t8.1tclient-libs/2d$$$CVE-2025-50106t8.1tclient-libs/2d$$$CVE-2025-30754t4.8tsecurity-libs/javax.net.ssl

Corretto version: 21.0.7.6.1$$$Release Date: April 15; 2025$$$$$$The following issues are addressed in 21.0.7.6.1:$$$$$$Issue Namet Platformt Descriptiont Link$$$Import jdk-21.0.7+6t Allt Updates Corretto baseline to OpenJDK 21.0.7+6thttps://github.com/openjdk/jdk21u/releases/tag/jdk-21.0.7+6 $$$(tz) Update Timezone Data to 2025btAllt Update tz code and data to use 2025b releaset JDK-8352716 (https://bugs.openjdk.org/browse/JDK-8352716)$$$The following CVEs are addressed in 21.0.7.6.1:$$$$$$CVEtCVSStComponent$$$CVE-2025-21587tsecurity-libs/javax.net.sslt7.4$$$CVE-2025-30698tclient-libs/2dt5.6$$$CVE-2025-30691thotspot/compilert4.8

Corretto version: 21.0.7.6.1$$$Release Date: April 15; 2025$$$$$$The following issues are addressed in 21.0.7.6.1:$$$$$$Issue Namet Platformt Descriptiont Link$$$Import jdk-21.0.7+6t Allt Updates Corretto baseline to OpenJDK 21.0.7+6thttps://github.com/openjdk/jdk21u/releases/tag/jdk-21.0.7+6 $$$(tz) Update Timezone Data to 2025btAllt Update tz code and data to use 2025b releaset JDK-8352716 (https://bugs.openjdk.org/browse/JDK-8352716)$$$The following CVEs are addressed in 21.0.7.6.1:$$$$$$CVEtCVSStComponent$$$CVE-2025-21587tsecurity-libs/javax.net.sslt7.4$$$CVE-2025-30698tclient-libs/2dt5.6$$$CVE-2025-30691thotspot/compilert4.8

The following issues are addressed in 21.0.6.7.1:$$$$$$Issue NametPlatformtDescriptiontLink$$$Import jdk-21.0.6+7tAlltUpdates Corretto baseline to OpenJDK 21.0.6+7thttps://github.com/openjdk/jdk21u/releases/tag/jdk-21.0.6+7$$$JDK-8345296taarch64tAArch64: VM crashes with SIGILL when prctl is disallowedthttps://bugs.openjdk.org/browse/JDK-8345296$$$JDK-8341194taarch64tImplement C2 VectorizedHashCode on AArch64thttps://bugs.openjdk.org/browse/JDK-8341194$$$The following CVEs are addressed in 21.0.6.7.1:$$$$$$CVEtCVSStComponent$$$CVE-2025-21502t4.8thotspot/compiler

The following CVEs are addressed in 21.0.5.11.1:$$$$$$CVEtCVSStComponent$$$CVE-2024-21235t4.8thotspot/compiler$$$CVE-2024-21208t3.7tcore-libs/java.net$$$CVE-2024-21210t3.7thotspot/compiler$$$CVE-2024-21217t3.7tcore-libs/java.io:serialization

The following issues are addressed in 21.0.4.7.1:$$$$$$Issue NametPlatformtDescriptiontLink$$$Import jdk-21.0.4+7tAlltUpdates Corretto baseline to OpenJDK 21.0.4+7tjdk-21.0.4+7$$$The following CVEs are addressed in 21.0.4.7.1:$$$$$$CVEtCVSStComponent$$$CVE-2024-21147t7.4thotspot/compiler$$$CVE-2024-21145t4.8tclient-libs/2d$$$CVE-2024-21140t4.8thotspot/compiler$$$CVE-2024-21131t3.7thotspot/runtime$$$CVE-2024-21138t3.7thotspot/runtime

Corretto version: 21.0.3.9.1$$$Release Date: April 16; 2024$$$$$$Target Platforms 1$$$$$$RPM-based Linux using glibc 2.12 or later; x86_64$$$Debian-based Linux using glibc 2.12 or later; x86_64$$$RPM-based Linux using glibc 2.17 or later; aarch64$$$Debian-based Linux using glibc 2.17 or later; aarch64$$$Alpine-based Linux; x86_64$$$Alpine-based Linux; aarch64$$$Windows 10 or later; x86_64$$$macos 12.0 and later; x86_64$$$macos 12.0 and later; aarch6$$$$$$For more details of resolved issues refer - https://github.com/corretto/corretto-21/blob/release-21.0.3.9.1/CHANGELOG.md#corretto-version-210391

Corretto version: 21.0.2.13.1$$$Release Date: January 16; 2024$$$$$$Target Platforms 1$$$$$$RPM-based Linux using glibc 2.12 or later; x86_64$$$Debian-based Linux using glibc 2.12 or later; x86_64$$$RPM-based Linux using glibc 2.17 or later; aarch64$$$Debian-based Linux using glibc 2.17 or later; aarch64$$$Alpine-based Linux; x86_64$$$Alpine-based Linux; aarch64$$$Windows 10 or later; x86_64$$$macos 12.0 and later; x86_64$$$macos 12.0 and later; aarch64$$$1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms$$$$$$The following issues are addressed in 21.0.2.13.1:$$$$$$Issue NametPlatformtDescriptiontLink$$$Import jdk-21.0.2+13tAlltUpdates Corretto baseline to OpenJDK 21.0.2+13tjdk-21.0.2+13$$$Data loss in AVX3 Base64 decodingtAlltBase64 appears to give different (wrong) results in some rare cases when AVX3 is enabled.tJDK-8321599$$$(tz) Update Timezone Data to 2023dtAlltUpdate Timezone Data to 2023dtJDK-8322725$$$NPE in PKCS7.parseOldSignedDatatAlltFixes exception PKCS7.parseOldSignedDattJDK-8315042$$$Enable UseCryptoPmullForCRC32 for Neoverse V2tAlltEnable UseCryptoPmullForCRC32tJDK-8321105$$$Enable Neoverse N1 optimizations for Neoverse V2tAlltEnable Neoverse N1 optimizations for Neoverse V2tJDK-8321025$$$The following CVEs are addressed in 21.0.2.13.1:$$$$$$CVEtCVSStComponent$$$CVE-2024-20918t7.4thotspot/compiler$$$CVE-2024-20952t7.4tsecurity-libs/java.security$$$CVE-2024-20919t5.9thotspot/runtime$$$CVE-2024-20921t5.9thotspot/compiler$$$CVE-2024-20945t4.7tsecurity-libs/javax.xml.crypto